"check_http --ssl" problem

[Emmett Hogan]

Hi Folks,

I am having a very strange problem.  I am moving nagios to a new server
and updating to V2.0 (from V2.0b1), at the same time upgrading from
nagios-plugins-1.4beta to nagios-plugins-1.4.2.

The big difference, and I think the source of my problem, is that I am
going from Debian Linux to Redhat Enterprise Linux.

In a nutshell, "check_http --ssl" doesn't work for our servers which
REQUIRE strong encryption.

Examples:

On our OLD Debian machine (everything is great):

# ./check_http -V
check_http (nagios-plugins 1.4-beta1) 1.79

# ./check_http -v -C 60 --ssl www.wellsfargo.com
SSL seeding: OK
OK - Certificate will expire on 08/19/2006 23:59.

# ./check_http -v -C 60 --ssl my-web-server
SSL seeding: OK
OK - Certificate will expire on 08/14/2011 18:21.

New Redhat Server:

# ./check_http -V
check_http (nagios-plugins 1.4.2) 1.81

# ./check_http -v -C 60 --ssl www.wellsfargo.com
SSL seeding: OK
OK - Certificate will expire on 08/19/2006 23:59.

# ./check_http -v -C 120 --ssl  my-web-server
SSL seeding: OK
CRITICAL - Cannot retrieve server certificate.

This happens even if I compile version 1.79 on the Redhat box and try to
run it.  So, I figured it must be an ssl library problem...right? 
Nope.  I grabbed the latest openssl, compiled it, and used it to build
both versions of check_http, and got the exact same problem.

I receive this error even when checking to make sure the https side is
up and running:

# ./check_http --ssl -v my-web-server
SSL seeding: OK
CRITICAL - Cannot retrieve server certificate.

I am pretty sure it has to do with my requirement of strong encryption
within my Apache server, but it works fine with my old setup.

Has anyone else on the list run into this problem before??

Any help would be GREATLY appreciated!

Thanks,
Emmett

-- 
========= LexisNexis Examen, Inc. ==========
Emmett Hogan
Senior UNIX Administrator
emmetth at examen.com
=== Outside Counsel Management Solutions ===



-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null